You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+97Lines changed: 97 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,6 +7,103 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
7
7
8
8
---
9
9
10
+
## [3.4.0] — 2026-06-07
11
+
12
+
The Modular Installation & IPC Engine Update
13
+
14
+
Welcome to **omnipkg v3.4.0**, a massive architectural milestone! This release brings a completely overhauled installation pipeline, microsecond-level C dispatcher optimizations, true zero-copy GPU IPC fallbacks, and deep ELF-level NumPy ABI parsing.
15
+
16
+
With over 35 commits and 14,000 lines of code changed, omnipkg is faster, safer, and smarter than ever.
17
+
18
+
## ✨ Major Architectural Features
19
+
20
+
We have decoupled the monolithic `_run_pip_install` into a highly optimized `ModularInstaller`.
21
+
***Staircase Dispatch:** Installations now cascade intelligently through `FFI` → `Daemon IPC` → `subprocess uv` → `pip fallback`, maximizing speed while ensuring bulletproof reliability across all environments.
22
+
***Atomic Stash-Swaps (`stable-main`):** Rebuilding bubbles from scratch is a thing of the past. Omnipkg now temporarily stashes the active package, allows `uv` to install the new version directly into the main environment, moves the fresh install into a bubble, and atomically restores the stash.
23
+
24
+
***Instant Help:**`8pkg --help` and `8pkg --version` are now intercepted directly by the C dispatcher using `uint64_t` word-load comparisons, rendering in **< 300 microseconds** (0ms startup time).
25
+
***Smart i18n Routing:** Implemented a lightweight `lang_marker_en` file and `OMNIPKG_LANG` environment variable cache. English users hit the ultra-fast C rendering path, while non-English locales seamlessly fall back to fully translated Python `argparse` menus.
26
+
***Persistent Config:** Changing your language via `8pkg config set language` now automatically updates your `.bashrc` / `.zshrc` to ensure your language choice persists across terminal sessions.
27
+
28
+
* Omnipkg's package metadata builder now natively parses `.so` ELF sections to extract the baked-in `NPY_FEATURE_VERSION` C-API requirement from compiled extensions (like PyTorch and TensorFlow).
29
+
* This intelligence is saved to the Knowledge Base (`numpy_abi_version` and `numpy_abi_range`), allowing the daemon to flawlessly select the correct NumPy bubble at runtime and ensuring Content-Addressable Storage (CAS) safely segregates incompatible tensor binaries.
30
+
31
+
***Turing/CUDA 13 Fallback:** Added the `TORCH_MP_QUEUE` IPC fallback for environments where raw `cudaIpcOpenMemHandle` is broken (e.g., Turing GPUs on driver 610). Tensors stay on the GPU using `share_memory_()`, keeping execution blazingly fast.
32
+
***TUI Resource Monitor:**`8pkg daemon monitor` now features an interactive TUI to track live RAM/VRAM usage.
33
+
***Configurable Idle Policies:** Use `8pkg daemon idle` to persistently configure exactly how many warm Python workers stay alive in the background, balancing instant execution with idle RAM footprint.
34
+
35
+
## 🛡️ Security & Dependency Updates
36
+
A massive sweep of dependency bumps to resolve several GitHub Dependabot CVE alerts:
37
+
***Bumped `urllib3` to `2.7.0`:** Resolves High-severity decompression bomb (CVE-2026-44432) and sensitive header leaks.
38
+
***Bumped `uv` to `0.11.19`:** Patches Arbitrary File Write/Deletion via entrypoint names and RECORD files.
39
+
***Bumped `idna` to `3.18`:** Resolves Domain Name encoding bypasses.
40
+
***Bumped `aiohttp` to `3.14.0`:** Fixes cross-origin redirect and untrusted deserialization vulnerabilities.
41
+
***Bumped `authlib` to `1.7.2`:** Fixes OIDC open redirects and CSRF-via-cache vulnerabilities.
42
+
***Dependabot config:** Excluded the `licenses/` directory to prevent false-positive syntax crashes during manifest parsing.
43
+
44
+
## 🐛 Bug Fixes & Quality of Life
45
+
***Ghost Repair Targeting:** The self-healer now targets the main environment directly using a pinned KB snapshot, preventing "ghost" metadata from tricking the system into bubbling a repaired package while leaving the main environment broken.
46
+
***Translation Shadowing:** Replaced all `_` tuple unpacking variables with `unused` globally to prevent shadowing of the `gettext``_()` translation function.
47
+
***Unicode / Terminal Safety:** Standardized `safe_print` across the entire codebase (Dispatcher, Core, and Tests) to prevent `UnicodeEncodeError` crashes on Windows and strict ASCII terminals.
48
+
***Windows Compatibility:** Guarded POSIX `fcntl` usage behind platform checks, leveraging `msvcrt.locking` on Windows for safe cross-process file locks.
49
+
50
+
## 🧪 Testing & Diagnostics
51
+
***KBSyncVerifier:** Refactored `test_verify_bubble_deps.py` into a robust, object-oriented symmetry checker that bi-directionally validates the SQLite Knowledge Base against physical disk states.
52
+
***Daemon IPC Showcase:** Added an interactive "Daemon IPC Showcase" to the `8pkg demo` menu (Option 11) to demonstrate zero-copy GPU tensor sharing across Python boundaries.
53
+
* Consolidated FFI diagnostic and contract tests into the main `tests/` directory and added the `integration` marker to `pytest.ini`.
if bubble_dir.name in (expected_bubble_name, expected_bubble_name_alt, expected_bubble_name_underscored) and bubble_dir.is_dir():
13751
+
if _norm(bubble_dir.name) in (_norm(expected_bubble_name), _norm(expected_bubble_name_alt), _norm(expected_bubble_name_underscored)) and bubble_dir.is_dir():
0 commit comments